Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: 2sQi+4c1hRVd+clw4qM/D0zHhy02k8L3B6FY7QToXUQ=
Subject key identifier: 48:E4:C8:FF:0F:F9:FD:0B:D1:F7:00:87:EA:29:BF:01:B3:18:5A:1B
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 0198D65F5E4E66CB81D307DABC393E3C1526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 151D
Signing time: Sat 23 Aug 2025 10:00:30 +0000
Manifest this update: Sat 23 Aug 2025 10:00:30 +0000
Manifest next update: Sun 24 Aug 2025 10:00:30 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: f+neHDiwL1Yaga+1+XLp5ELFz3ViJpvYcXDtg3QhXV8=)
2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5e:4e:66:cb:81:d3:07:da:bc:39:3e:3c:15:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Aug 23 10:00:30 2025 GMT
Not After : Aug 24 10:00:30 2025 GMT
Subject: CN=48e4c8ff0ff9fd0bd1f70087ea29bf01b3185a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:13:c7:d5:c1:1b:22:54:8e:fc:e7:46:2d:
ea:88:9c:3a:9b:ad:bd:b4:4e:60:9c:b4:59:c6:03:
06:40:e9:9d:75:75:cc:1f:e8:08:a8:6e:6c:0f:4b:
b9:f1:66:d4:9b:46:2b:29:11:6a:d7:41:55:60:b0:
ae:c2:0b:2c:fd:76:67:83:19:3a:cd:35:44:e2:55:
29:15:d2:51:01:f4:44:13:86:cf:01:49:0d:fc:f8:
8c:f1:2f:48:0c:14:07:ce:33:8c:67:19:84:68:10:
c0:df:f5:5d:f7:07:4c:2a:1e:7b:65:c5:60:f6:4a:
42:0f:fb:8d:99:43:97:37:46:f0:71:e3:2d:9d:50:
7d:d0:39:5c:fe:8a:a2:9e:3a:9a:c5:fb:65:8a:13:
96:ae:00:12:fc:12:1f:56:77:d8:de:60:7a:f2:ff:
07:11:ce:22:84:c5:28:fe:ca:db:42:02:8d:d0:89:
8b:b6:88:7a:22:f5:40:5b:82:1d:3c:75:39:1e:e1:
b1:d0:1c:01:0a:4e:93:4a:3c:e7:48:9f:e8:87:92:
e4:e1:d6:57:91:f0:eb:ea:18:27:9c:fa:c9:69:a3:
23:b3:6c:cc:8a:05:9b:c3:cc:9a:37:06:83:8d:3a:
7b:0f:26:fe:2b:b6:8d:c0:87:a4:97:88:19:66:26:
7d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E4:C8:FF:0F:F9:FD:0B:D1:F7:00:87:EA:29:BF:01:B3:18:5A:1B
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ed:8f:80:5d:53:d8:ee:61:2a:5e:eb:39:48:49:ee:06:36:
86:b4:21:84:90:bb:29:b8:50:c9:26:e0:60:60:0d:33:0e:dc:
42:43:cd:ec:f7:df:5c:e8:12:2e:13:10:d1:7d:78:b2:10:69:
c0:b7:ee:e0:31:01:50:d9:3c:21:ef:97:ed:ca:43:52:30:00:
c2:73:23:3c:cd:19:b4:79:84:e4:de:45:f7:02:62:fd:51:3b:
5b:10:29:6c:a0:bc:15:a9:2d:9c:55:44:f5:9f:2d:50:0e:a9:
0d:e8:d2:56:7a:ca:2f:44:6c:90:5f:81:1d:c4:83:bd:b8:84:
35:a2:36:f2:2c:2f:f4:e1:80:68:37:7b:5a:b7:86:d6:04:38:
81:f6:8b:85:9d:6d:6c:b0:fe:09:12:68:c7:c4:61:83:f9:09:
0c:df:54:a2:a0:27:33:d5:b7:71:36:55:63:0e:57:01:67:f3:
ab:db:ea:9e:2e:63:ee:67:7d:55:5e:98:09:c8:8f:8f:d5:aa:
ba:e8:21:34:5a:79:da:33:f5:f5:72:f9:84:cb:25:3b:45:11:
87:11:83:39:2d:bc:3b:31:39:f2:bf:04:1b:9d:2a:b2:47:3b:
9c:4b:b0:00:69:a5:72:81:24:d9:43:9d:9a:d5:de:71:3b:b4:
57:76:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:55 2025 by rpki-client